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Top Stories 

• Toyota Motor Corporation expanded recalls June 16 for 1.37 million vehicles due to 
ongoing issues with airbag inflators manufactured by the Takata Corporation that could 
cause airbags to prematurely inflate or explode. - CNBC (See item 6) 

• California authorities arrested 2 people June 16 after discovering thousands of stolen credit, 
identification, Social Security cards, income tax documents, and more in their vehicle’s 
trunk. - KABC 7 Los Angeles (See item 7) 

• The U.S. Food and Drug Administration announced June 16 that food manufacturers will 
have 3 years to remove partially hydrogenated oils from products unless specifically 
approved. - U.S. Food and Drug Administration (See item 14 ) 

• The director of the U.S. Office of Personnel Management claimed June 16 that the agency 
fends off an average of 10 million hacking attempts per month and that the number of 
attacks will increase. - Bloomberg (See item 21 ) 
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Energy Sector 



1. June 17, Threatpost - (National) Plaintext credentials threaten RLE wind turbine 

HMI. The DHS Industrial Control Systems Cyber Emergency Response Team (ICS- 
CERT) issued an advisory after a security researcher discovered a vulnerability in the 
Nova-Wind Turbine human-machine interface (HMI) for turbines manufactured by 
RLE International GmbH in which an attacker could leverage credentials stored in 
plaintext to perform actions on the device, resulting in a possible loss of power for all 
attached systems. 

Source: https://threatpost.com/plaintext-credentials-threaten-rle-wind-turbine- 
hmi/1 13354 

2. June 16, Pittsburgh Post-Gazette - (Pennsylvania) DEP fines Range Resources $8.9 
million for Marcellus shale gas well. The Pennsylvania Department of Environmental 
Protection (DEP) fined Pennsylvania-based Range Resources Appalachia LLC $8.9 
million June 16 for failing to repair a gas well that released methane and contaminated 
water wells, streams, and a pond in Lycoming County since 2011. 

Source : http://powersource.post-gazette.com/powersource/policv- 
powersource/2015/06/16/DEP-fines-Range-Resources-8-9-million-for-Marcellus-shale- 
gas- well -penns vlvania/stories/20 1506160173 

3. June 16, U.S. Environmental Protection Agency - (California) Biodiesel fuel 
company owner pleads guilty to fraud and Clean Air Act crimes connected to 
renewable fuels scheme / faces more than 10 years imprisonment and $51 million 
in restitution. The owner of biodiesel fuel company Green Diesel, LLC, pleaded guilty 
June 16 to a Clean Air Act false statement and mail fraud as part of his role in a scheme 
to defraud the U.S. Environmental Protection Agency by falsely representing that he 
was producing millions of gallons of biodiesel fuel from 2010-2011. 

Source: 

http://vosemite.epa.gOv/opa/admpress.nsf/0/BE474A4C7A0422EE85257E660068E53 

A 

4. June 16, North Carolina Indy Week - (North Carolina) Chatham County makes deal 
with Duke Energy on coal ash. Duke Energy announced an agreement June 16 to 
remove coal ash from 4 plants and pay Chatham County, North Carolina $18 million 
for associated costs. Duke Energy will place the ash in local clay mines and defray any 
environmental hazards through a contractor. 

Source: http://www.indyweek.com/news/archives/2015/06/16/chatham-countv-makes- 
deal-with-duke-energy-on-coal-ash 

T Return to top i 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

5. June 16, Associated Press - (Nebraska) OPPD restarts nuclear plant after refueling 
outage. The Omaha Public Power District reported that the Fort Calhoun Nuclear 
Generating Station in Nebraska was back to full power June 15 following a scheduled 
refueling and maintenance outage initiated in April. 

Source: http://www.wgem.com/storv/29333610/oppd-restarts-nuclear-plant-after- 
refueling-outage 

1 Return to top i 

Critical Manufacturing Sector 

6. June 16, CNBC - (National) Toyota expanding U.S. airbag-related recalls by 1.37M 
vehicles. Toyota Motor Corporation reported expanded recalls June 16 for 1.37 million 
model year 2003 - 2007 Corolla and Corolla Matrix, 2005 - 2006 Tundra, 2005 - 2007 
Sequoia, and 2003 - 2007 I^exus SC430 vehicles due to ongoing issues with airbag 
inflators manufactured by the Takata Corporation that could cause airbags to 
prematurely inflate or explode. 

[ Return to top ] 



Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

7. June 16, KABC 7 Los Angeles - (California) 2 arrested for stealing thousands of 
credit, ID, Social Security cards in Highland. Highland, California authorities 
arrested 2 people June 16 after discovering thousands of stolen credit, identification, 
Social Security cards, income tax documents, and more in their vehicle’s trunk, as well 
as an embossing machine allegedly used to flatten names on cards for replacement. The 
investigation is ongoing. 

Source: http://abc7.com/news/2-arrested-for-stealing-thousands-of-credit-id-social- 
security-cards-in-highland/789473/ 

8. June 16, U.S. Securities and Exchange Commission - (National) SEC announces 
charges against retirement plan custodian in connection with Ponzi scheme. The 
U.S. Securities and Exchange Commission announced charges June 16 against 
Westlake, Ohio-based Equity Trust Company, alleging that the company failed to 
protect its customers from a Ponzi retirement fund investment scheme that 2 
representatives used to defraud over 100 investors out of more than $5 million. The two 
representatives were indicted for alleged offering fraud in New Jersey. 
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Source: http://www.sec.gov/news/pressrelease/2015-121.html 
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Transportation Systems Sector 

9. June 17, KXTV 10 Sacramento - (California) 9 vehicles involved in 1-80 crash in 
West Sacramento near IKEA. Interstate 80 in West Sacramento was closed for 4 
hours June 16 due to a 9-vehicle accident that injured 5 people after a semi-truck failed 
to slow for traffic. 

Source: http://www.newsl0.net/story/news/local/sacramento/2015/06/16/hit-and-run- 
causes-ikea-backup-west-sacramento/288 14897/ 

10. June 17, The Oregonian/OregonLive - (Oregon; Washington) 1-5 Interstate Bridge 
reopens to traffic following 5-hour closure due to overturned truck. Southbound 
lanes of Interstate 5 at the Interstate Bridge in Washington and Oregon reopened June 
17 after being closed for 5 hours while crews cleaned up after a semi-truck hauling 
empty wine bottles overturned and spilled its load onto the roadway. No injuries were 
reported. 

Source: http://www.oregonlive.com/roadreport/index.ssf/2015/06/i- 
5 bridge reopens to traffic.html 

11. June 16, Orange County Register - (California) Plane lands on belly at John Wayne 
Airport; flight delayed, diverted. Flights to and from John Wayne Airport in Orange 
County, California were being delayed or diverted June 16 while crews removed a 
private plane that landed on its belly without the use of its landing gear. The numbers 
of flights affected are not known. 

Source: http://www.ocregister.com/articles/airport-667025-plane-flights.html 

[ Return to top ] 

Food and Agriculture Sector 

12. June 16, U.S. Department of Agriculture - (California) Venus Foods Inc. recalls pork 
sausage products due to misbranding and undeclared allergen. The Food Safety 
and Inspection Service reported June 16 that Venus Foods Inc., a City of Industry, 
California establishment, is recalling approximately 25,380 pounds of pork sausage 
products due to misbranding and an undeclared wheat allergen. The products were 
produced from June 2014 - May 2015 and shipped to restaurant locations in California. 
Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2015/recall-092-201 5-release 

13. June 16, Associated Press - (Iowa) Iowa reports an egg farm with bird flu after a 6- 
day break. The Iowa Department of Agriculture reported June 16 that a 1 million egg- 
laying chicken farm in Wright County, Iowa has tested positive for the bird flu after 
preliminary testing showed traces of the virus. Iowa State officials announced that 32 
million birds have been euthanized due to the avian flu. 
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Source: http://www.ksfv.com/home/headlines/Iowa-reports-an-egg-farm-with-bird-flu- 
after-a-6-day-break-307756641.html 



14. June 16, U.S. Food and Drug Administration - (National) The FDA takes step to 
remove artificial trans fats in processed foods. The U.S. Food and Drug 
Administration (FDA) announced June 16 that partially hydrogenated oils (PHOs), a 
source of artificial trans fat, are not “generally recognized as safe” for use in human 
food and food manufacturers will have a compliance period of three years to remove 
PHOs from products. Following the compliance period, no PHOs can be added to 
human food unless approved by the FDA. 

Source: 

http://www.fda.gov/NewsEvents/Newsroom/PressAnnouncements/ucm451237.htm 

15. June 16, Chicago Tribune - (Michigan) 3 injured in ammonia leak at Northwest 
Side poultry factory. The Chicago Fire Department initiated a hazardous material alert 
at Koch Foods in Irving, Michigan, after an ammonia leak sent 3 workers to area 
hospitals with non-life threating injuries June 16. Fire crews contained the incident. 
Source: http://www.chicagotribune.com/news/local/breaking/ct-3-iniured-in-ammonia- 
leak-at-northwest-side-poultrv-factorv-20 15061 6-story.html 
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Water and Wastewater Systems Sector 

16. June 17, W1VB 4 Buffalo - (New York) Rain mixes with sewer water in Buffalo, 
Cheektowaga. Officials reported June 16 that there was a 14 hour period over which 
up to 8,100 gallons per minute of untreated water were discharged from the Harlem 
Road Station into the Scajaquada Creek in Buffalo and Cheektowaga, New York. 
Source: http://wivb.com/2015/Q6/16/rain-mixes-with-sewer-water-in-buffalo- 
cheektowaga/ 

17. June 16, Shelton Patch - (Connecticut) Elevated bacteria count closes Shelton 
Beach. Connecticut Department of Energy and Environmental Protection officials 
reported June 16 that the beach at Indian Well State Park in Shelton was closed June 16 
due to elevated bacteria counts detected by water quality testing. Four other beaches in 
Westport, Milford and Southbury were closed and tested, and results are expected June 
17. 

Source: https://patch.com/connecticut/shelton/elevated-bacteria-count-closes-shelton- 
beach-0 



For another story, see item 2 
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Healthcare and Public Health Sector 

18. June 15, U.S. Department of Labor - (Rhode Island) East Greenwich, Rhode Island, 
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health clinic provider lacks effective blood hazard safeguards. The Occupational 
Safety and Health Administration cited East Greenwich based- Provant Health 
Solutions LLC for 10 violations after a November 2014 inspection revealed that the 
company inadequately protected its employees against exposure from contaminated 
needle sticks and blood bom pathogen hazards, after an employee complained that a 
used needle punctured him as he unpacked a box in the company’s mailroom. Proposed 
fines total $62,000. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28149 
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Government Facilities Sector 



19. June 17, KHOU 11 Houston - (Texas) List: school closings, delays for Wednesday. 
Classes and activities were cancelled June 17 at Cristo Rey Jesuit College Preparatory 
School and the Goose Creek, La Porte, Sealy, and Wharton Independent School 
Districts in the Houston area due to inclement weather caused by Tropical Storm Bill. 
Source: http://www.khou.com/storv/weather/2015/06/15/school-closings-delays-for- 
wednesday/28782681/ 

20. June 16, SC Magazine - (North Dakota) North Dakota Workforce Safety Institute 
experiences a breach. Authorities reported that about 43,000 incident reports and 
13,000 payroll reports containing Social Security, names, employer, and medical 
information for employee and worker reports filled online between 2006 - 2013 were 
compromised in a breach of the North Dakota Workforce and Safety Institute (WSI) 
servers. The WSI became aware of the breach June 10 and is offering free identity 
repair services to affected individuals. 

Source: http://www.scmagazine.com/north-dakota-wsi-experiences-breach-thousands- 
at-risk/article/421053/ 



21. June 16, Bloomberg - (National) U.S. jobs agency thwarts 10 million hacks a month, 
director says. The director of the U.S. Office of Personnel Management claimed June 
16 in a U.S. House of Representatives committee hearing that the agency fends off an 
average of 10 million hacking attempts per month, and that the number of attacks will 
increase. Officials reported that the June breach may have compromised personal 
information of up to 14 million current and former Federal employees and their 
associates. 

Source: http://www.bloomberg.com/news/articles/2015-06-16/u-s-iobs-agency-thwarts- 
10-million-hacks-a-month-director-says 

For another story, see item 22 
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Emergency Services Sector 



22. June 16, Associated Press - (California) Mayor of Santa Ana named in pot shop 
raid lawsuit. The Santa Ana mayor, a city employee, and several officers were accused 
June 16 of allegedly soliciting $25,000 in payments and gifts from marijuana 
dispensaries that guaranteed business licenses in lottery systems and claiming police 
were used to shut down operations that did not compensate monetary funds. An 
investigation is ongoing to further assess the case. 

Source: http://www.nbclosangeles.com/news/local/Lawsuits-To-Be-Filed-Against- 
Santa- Ana- After-Pot-Shop-Raid-307 40638 1 .htrnl 

23. June 16, KFSM 5 Fort Smith - (Arkansas) Greenwood police identify suspect 
accused of stealing police car, crashing it. The Greenwood Police Department 
reported June 16 that an Arkansas woman was arrested after she allegedly led police in 
a high-speed car chase, stole a police car, crashed the vehicle into a gas well, and 
attempted to procure an assault rifle from the police vehicle. 

Source: http://5newsonline.com/2015/Q6/16/woman-steals-police-car-crashes-it- 
greenwood-police-say/ 

24. June 16, KXAS 5 Fort Worth - (Texas) Third man arrested in Garland “Draw 
Muhammad” shooting: authorities. Texas prosecutors reported June 16 that a man 
was charged for allegedly helping plan a shooting attack at a provocative cartoon 
contest in Phoenix, Texas that killed 2 men and injured a security guard during a police 
shootout. An investigation is ongoing to find associated perpetrators. 

Source: http://www.nbcdfw.com/news/local/Third-Man-Arrested-in-Garland-Draw- 
Muhammad-Shooting-Authorities-307578041.html 

25. June 15, State College Centre Daily Times - (Pennsylvania) Former State College 
officer charged in police department evidence theft. A former State College police 
officer was charged June 15 for allegedly tampering and stealing drug evidence, 
including 23 counts each of different drug charges, 14 counts of evidence tampering, 
and a theft charge, while on duty as an evidence custodian in August 2013. 

Source: http://www.centredaily.com/2015/06/15/4795257 state-college-officer- 
charged . html ?rh= 1 

For another story, see item 29 
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Information Technology Sector 

26. June 17, Softpedia - (International) Retrospect clients patched to prevent exposure 
of backup files. Retrospect Inc., released a patch addressing a password hashing 
vulnerability in its network backup utility for Apple, Linux, and Microsoft Windows 
operating systems (OS) in which an attacker with access to networked clients could 
gain access to users’ backup files. 
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Source: http://news.softpedia.com/news/Retrospect-Clients-Patched-to-Prevent- 
Exposure-of-B ackup-Files-484577 . shtml 

27. June 17, Softpedia - (International) Over 600 million Samsung devices vulnerable to 
keyboard security risk. Security researchers at NowSecure discovered a remote code 
execution vulnerability in the SwiftKey Android app in which an attacker could access 
device sensors, pictures, and text messages, alter or install apps, or listen to voice-calls. 
The vulnerability was patched in early 2015. 

Source: http://news.softpedia.com/news/Over-600-Million-Samsung-Devices- 
Yulnerable-to-Kevboard-Security-Risk-484562.shtml 



28. June 16, SC Magazine - (International) Study: 15-30 percent of eCommerce site 
visitors infected with CSIM. A report released by Namogoo revealed that 15-30 
percent of eCommerce site visitors are infected with client-side injected malware 
(CSIM), and that attacks have increased by 20 percent in the last 6 months, among 
other findings. 

Source: http://www.scmagazine.com/narnogoo-studv-shows-nearlv-a-third-of- 
ecommerce-site-visitors-could-be-infected-with-csim/article/420346/ 



For additional stories, see items 1 and 20 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



29. June 17, KMA 960 AM Shenandoah - (Iowa) CenturyLink service has reportedly 
been restored. CenturyFink customers in Page and Montgomery counties along with 
customers in Fremont, Mills and Taylor counties were impacted by an Internet and 
telephone outage June 16-17 that affected 9-1-1 service. 

Source: http://www.kmaland.com/news/centurylink-problems-persist-this- 
morning/article 9dledca8-14dc-lle5-b838-ef28d41ab8c9.html 

For another story, see item 27 



[ Return to top ] 



Commercial Facilities Sector 

30. June 17, Associated Press - (Georgia) Police: Georgia motel fire sparked by meth 
lab. FaGrange police reported June 17 that a June 1 1 fire at Super 8 Motel in Georgia 
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began after a man mixed chemicals to make meth which ignited the fire. The man was 
allegedly charged with criminal damage to the property. 

Source: http://onlineathens.com/breaking-news/2015-06-17/police-georgia-motel-fire- 
sparked-meth-lab 

31. June 17, Associated Press - (Washington) Bellevue, Wash.: sprinkler system 
problem floods part of high-rise apartment building. The Bellevue, Washington 
Fire Department reported June 16 that a sprinkler system flooded 27 floors of a high- 
rise apartment after a man backed a car into a garage sprinkler. Officials estimated up 
to 30,000 gallons of water were spilled and several units destroyed. 

Source: 

http://www.greenfieldreporter.com/view/story/8ce0006bf5524e8ca8ab476357ba38fa/ 
WA— Bellevue-Apartment-Sprinklers 

32. June 17, Maryville Daily Times - (Tennessee) Fire forces Maryville motel 
evacuation, closure. The Mountain View Motel in Maryville, Tennessee remains 
closed June 17 after an electrical fire prompted the evacuation of the building which 
began in an apartment unit and traveled to its attic June 16. No injuries were reported 
and the motel sustained electrical damage. 

Source: http://www.thedailytimes.com/news/fire-forces-marvville-motel-evacuation- 
closure/article 97accc65-87d3-5be0-9bd9-edd40df2b3f8.html 



33. June 17, Augusta Chronicle - (South Carolina) 80 evacuated from SC assisted living 
fire. A June 17 fire prompted the evacuation of more than 80 residents at the Forest 
Pines Retirement Residence in Columbia, South Carolina, sending 3 people to area 
hospitals. An investigation is ongoing to determine the cause of the fire and damages 
total $1 million. 

Source: http://chronicle.augusta.com/latest-news/2015-06-17/8Q-evacuated-sc-assisted- 
living-fire 

34. June 17, WTOP103.5 FM Washington D.C. - (Washington, D.C.) $1M in damage 
after lire at Tuckers Restaurant. A 3-alarm fire at Tuckers Restaurant in Upper 
Marlboro, Maryland sustained extensive damage after a fire began in the attic of the 
building and spread to surrounding areas June 17. Firefighters remained on site for 
several hours to contain the blaze and damages total $1 million. 

Source: http://wtop.com/prince-georges-county/2015/06/fire-at-tuckers-restaurant-in- 
upper-marlboro/ 
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Dams Sector 

Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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